This Site and any services offered through the Site are reserved for individuals who are 18 years of age or older. Therefore, the Data Controller does not collect personal data relating to persons under the age of 18. At the request of Users, the Data Controller will promptly delete all personal data involuntarily collected relating to persons under the age of 18.
The data covered by this processing are as follows:
Users’ personal data will be lawfully processed by the Controller in accordance with Article 6 of the Regulation for the following purposes:
processing of Work with Us requests: activities connected with or instrumental to the company’s internal selection processes in order to assess the candidates’ profiles in relation to employees, trainees or collaborators who have been assigned professional work assignments; evaluation and preservation of CVs
administrative and accounting purposes, i.e. to carry out activities of an organisational, administrative, financial and accounting nature, such as internal organisational activities and activities functional to the fulfilment of contractual and pre-contractual obligations
legal obligations, i.e. to fulfil obligations laid down by law, authority, regulation or legislation and to ascertain liability in the event of hypothetical computer crimes to the detriment of the Site
performance of a contract, if the processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures.
However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to verify whether the processing is based on the law, required by a contract or necessary to conclude a contract.
The provision of personal data for the processing purposes indicated above is optional but necessary, since failure to provide such data will make it impossible for the User to make his/her request to the Controller.
Personal data that are necessary for the pursuit of the processing purposes described in this point 2) are indicated with an asterisk in the request form.
The Data Controller will process the personal data of the Users by means of manual and computerized tools, with logics strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the data.
The personal data of the Site’s Users will be stored for the time strictly necessary to fulfil the primary purposes illustrated in point 2) above or, in any case, as long as necessary to protect the interests of both the Users and the Data Controller under civil law.
The subjects in charge of managing the Site and the Users’ requests may become aware of the Users’ personal data. These subjects, who have been instructed to do so by the Data Controller in accordance with Article 29 of the Regulation, will process the User’s data exclusively for the purposes indicated in this information notice and in compliance with the provisions of the Applicable Regulations.
Users’ personal data may also be disclosed to third parties who may process personal data on behalf of the Data Controller in the capacity of “External Data Processors”, such as, by way of example, suppliers of IT and logistical services functional to the operation of the Site, suppliers of outsourced or cloud computing services, professionals and consultants.
Users are entitled to obtain a list of any Data Processors appointed by the Controller by making a request to the Controller in the manner indicated in point 6) below.
Data collected in connection with the aforementioned purposes are not transferred to non-EU countries. The data controller, however, reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as provided for in Article 46 of EU Regulation 2016/679.
Users may exercise the rights guaranteed to them by the Applicable Legislation by contacting the Controller in the following ways:
Users have the right to obtain:
access to personal data in order to know (‘responsive transparency’) the purposes of the processing, the categories of personal data collected, the recipients of the data communication, in particular if third countries or international organisations are involved, the period of data retention envisaged (Art. 15)
obtain rectification (Art. 16);
the right to obtain the deletion of personal data if they are no longer necessary in relation to the purposes for which they were collected and if there is no further legal need for their storage (Art. 17 GDPR);
request restriction of processing (Art. 18);
request data portability (Art. 20);
right to object to processing for reasons related to your particular situation (Art. 21 GDPR). In this case, we will refrain from further processing your data unless you demonstrate the existence of compelling legitimate grounds for processing (e.g. to defend your rights in court).
not to be subject to automated decision-making, including profiling (Art. 22);
to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation (Art. 7).
Lastly, the data subject shall have the right to lodge a complaint with the Supervisory Authority pursuant to Art. 13(2)(d) of the aforementioned Regulation as well as pursuant to Art. 77 of the Regulation.
The Italian supervisory authority is the Garante per la protezione dei dati personali, based in Piazza Venezia 11, 00186 – Roma (https://www.garanteprivacy.it/).
For all matters not provided for in this Information Notice, reference is made to Regulation (EU) 2016/679 to Legislative Decree 196/03 as amended by Legislative Decree 101/2018 as amended, as well as to any other provision issued by the Italian Data Protection Authority (“Garante”).